Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json)
Hash identifier: ZbmcLFNos2JrPlKkXofBiDhy9nN6MFHrsnBuxQD0US0=
Subject key identifier: 08:2D:31:BD:CF:95:73:67:49:6E:8A:BC:80:75:FA:B9:45:56:89:1F
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 0197B6A1F47F44804224194CBC44318B68E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
Manifest number: 9B
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: Ohrl2rhh1Stt9z2/pC+RS5EImOeqgUqhx/82jTVCbDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f4:7f:44:80:42:24:19:4c:bc:44:31:8b:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=082d31bdcf957367496e8abc8075fab94556891f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:08:29:b1:83:93:5e:75:2e:06:ca:39:38:
af:b5:3c:29:51:8a:48:5d:aa:41:77:8d:53:e0:e8:
ee:43:b6:ba:76:fe:e9:f6:82:ce:55:52:98:3c:11:
1b:0b:18:fa:0a:cd:2b:a4:a8:80:4c:3d:2f:50:58:
40:63:93:4d:db:1b:c7:d9:1e:e6:60:e3:dd:da:5c:
2d:d0:54:19:56:a1:1a:2b:87:47:f0:6c:55:78:2b:
dc:98:96:f1:78:70:30:ba:7c:9e:06:a4:23:18:6b:
a8:b1:a1:c8:4b:2f:80:54:92:71:97:c5:11:73:a2:
d0:9f:08:6e:85:ec:83:9b:d9:fc:15:12:bc:98:3c:
8a:d6:f3:13:23:60:ee:b8:4c:d2:d0:81:94:10:5c:
25:c5:0f:5d:bd:0e:30:40:fe:9c:81:b6:3c:ce:7f:
de:00:e2:db:b1:23:17:75:a7:e0:5c:66:7e:54:9d:
b1:95:6a:20:32:39:ea:60:e6:0c:e0:06:54:b4:15:
93:d0:6e:14:98:c2:17:3b:e7:ac:8c:d1:56:68:bc:
1b:de:21:d3:43:ac:b5:ed:b1:e7:dd:ef:3c:80:97:
d4:7d:81:c1:0e:97:f2:9b:1d:14:7b:2b:7f:c0:61:
3a:83:9e:79:1c:f5:f8:a2:6e:bf:54:22:3e:81:94:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:31:BD:CF:95:73:67:49:6E:8A:BC:80:75:FA:B9:45:56:89:1F
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:31:a5:08:55:19:53:7f:f3:b2:00:91:4c:0a:8a:81:e0:26:
5c:e8:0b:7d:85:4c:16:ad:f2:a8:9f:91:36:43:9d:cc:2b:ab:
3b:fc:1d:e8:28:94:fd:2c:77:c1:5b:eb:69:40:d4:80:7a:94:
63:f2:aa:c1:92:9e:86:0b:2e:52:b9:d3:59:85:e8:5e:3b:a5:
b4:3f:53:98:9f:e1:00:66:71:67:ea:7f:06:a0:86:87:bf:75:
63:34:3a:e1:ac:4c:3c:29:ad:0b:e8:f0:7a:0f:b7:6d:fc:44:
3a:2c:b0:aa:8a:57:21:66:00:a0:2b:a1:74:95:bf:0e:53:41:
86:24:5b:2a:19:eb:3a:b4:8b:5d:f5:e6:60:76:f0:fa:bb:ed:
45:e8:c8:fe:66:cf:99:c4:11:d6:a5:f6:52:89:6c:24:42:cb:
de:e1:80:54:88:0b:e8:99:df:35:f1:51:55:56:fa:37:1e:46:
d0:81:e4:22:a4:9d:b2:74:2f:0d:64:c1:6f:03:01:11:2e:5b:
15:95:41:df:b5:86:ad:16:80:c0:9b:12:ab:86:50:6a:2d:67:
46:fe:1f:45:ed:0d:15:30:5d:c9:d2:4d:d4:63:15:80:1e:b5:
56:ab:3d:33:67:44:4c:c7:55:11:6f:c5:cb:e4:be:cb:47:52:
ea:06:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:00 2025 by rpki-client